ci: use env guard for marketplace token

Author: magisk317

.github/workflows/release.yml

@@ -11,6 +11,8 @@ permissions:
 jobs:
   release:
     runs-on: ubuntu-latest
+    env:
+      MARKETPLACE_PR_TOKEN: ${{ secrets.MARKETPLACE_PR_TOKEN }}
     steps:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4
@@ -31,11 +33,11 @@ jobs:
       - id: marketplace-meta
         run: |
           node --input-type=module -e "import fs from 'fs'; const pkg = JSON.parse(fs.readFileSync('package.json','utf8')); const meta = JSON.parse(fs.readFileSync('napgram-plugin.json','utf8')); const id = (meta.id || pkg.name); console.log(`id=${id}`); console.log(`version=${pkg.version}`);" >> $GITHUB_OUTPUT
-      - if: ${{ secrets.MARKETPLACE_PR_TOKEN != '' }}
+      - if: ${{ env.MARKETPLACE_PR_TOKEN != '' }}
         name: Ensure marketplace fork
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.MARKETPLACE_PR_TOKEN }}
+          github-token: ${{ env.MARKETPLACE_PR_TOKEN }}
           script: |
             const upstream = { owner: 'NapGram', repo: 'marketplace' };
             const forkOwner = context.actor;
@@ -55,18 +57,18 @@ jobs:
               }
             }
             core.setFailed('marketplace fork not ready');
-      - if: ${{ secrets.MARKETPLACE_PR_TOKEN != '' }}
+      - if: ${{ env.MARKETPLACE_PR_TOKEN != '' }}
         uses: actions/checkout@v4
         with:
           repository: ${{ github.actor }}/marketplace
-          token: ${{ secrets.MARKETPLACE_PR_TOKEN }}
+          token: ${{ env.MARKETPLACE_PR_TOKEN }}
           path: marketplace
-      - if: ${{ secrets.MARKETPLACE_PR_TOKEN != '' }}
+      - if: ${{ env.MARKETPLACE_PR_TOKEN != '' }}
         run: node scripts/marketplace-upsert.mjs --index marketplace/index.json --snippet marketplace-index-snippet.json
-      - if: ${{ secrets.MARKETPLACE_PR_TOKEN != '' }}
+      - if: ${{ env.MARKETPLACE_PR_TOKEN != '' }}
         uses: peter-evans/create-pull-request@v6
         with:
-          token: ${{ secrets.MARKETPLACE_PR_TOKEN }}
+          token: ${{ env.MARKETPLACE_PR_TOKEN }}
           path: marketplace
           commit-message: "marketplace: update ${{ steps.marketplace-meta.outputs.id }} ${{ steps.marketplace-meta.outputs.version }}"
           branch: "marketplace/${{ steps.marketplace-meta.outputs.id }}-${{ steps.marketplace-meta.outputs.version }}"